Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
File: NscJXgRZhgU7mz6HiQNnJoN90fU.mft (raw, json)
Hash identifier: +NQ7zjcSwdbamPixZKe0TK9cRFYJd3QzFTTWxJ2CjRg=
Subject key identifier: A3:6C:71:B6:3C:1F:D9:2A:88:01:7D:08:2E:75:98:49:9B:00:FB:E7
Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
Certificate issuer: /CN=36c7095e045986053b9b3e8789036726837dd1f5
Certificate serial: 019836BA5CC4C276DEF5EE3B410116B805F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
Manifest number: 0520
Signing time: Wed 23 Jul 2025 10:00:39 +0000
Manifest this update: Wed 23 Jul 2025 10:00:39 +0000
Manifest next update: Thu 24 Jul 2025 10:00:39 +0000
Files and hashes: 1: 13YuQXcDJbnIYp9Q74L-JDcuLVM.roa (hash: xxqrr3XwSKukvs1NGhAPXhNBgDJT5zDVkc5duMlGjfY=)
2: NscJXgRZhgU7mz6HiQNnJoN90fU.crl (hash: FfsS2kdc8HGvhT0FhfLPIgpn53cFzmsdGvtncEMn+HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:ba:5c:c4:c2:76:de:f5:ee:3b:41:01:16:b8:05:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5
Validity
Not Before: Jul 23 10:00:39 2025 GMT
Not After : Jul 24 10:00:39 2025 GMT
Subject: CN=a36c71b63c1fd92a88017d082e7598499b00fbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0f:d7:14:94:08:5e:2f:cf:9c:46:9a:86:50:
7d:6e:a2:09:26:36:d6:41:68:01:6a:e2:33:d2:d9:
1a:a4:b9:93:e1:01:de:cb:48:cd:21:16:a6:c1:c8:
71:e0:8f:3d:d7:76:59:d5:f0:32:b3:4a:82:9a:e3:
a4:5a:22:c6:e4:8c:20:aa:e8:8e:c6:aa:60:81:15:
90:d3:a4:43:23:b9:2a:1d:08:c3:2f:16:e1:83:c7:
d3:58:cf:e6:72:1a:8a:75:19:5a:f5:42:2d:a0:dc:
d6:03:43:62:31:c6:4f:16:af:b3:af:2a:fa:39:8b:
92:0e:fd:a3:1c:c4:cd:35:62:49:17:74:68:e4:3b:
cf:98:7e:f6:66:de:2d:f7:b8:a0:6e:2c:d5:40:5a:
70:88:5c:6a:5c:93:8b:bf:5c:ea:89:ab:28:3d:4c:
8b:ec:90:c9:9f:84:af:c0:e0:0c:10:ce:ab:58:b7:
c7:b9:5b:46:7f:49:e1:9a:db:b9:71:a3:cf:c8:d1:
ae:c6:97:bf:aa:6f:5e:01:66:ef:3b:3d:ec:a3:03:
1d:4e:f0:9f:5b:9d:1b:be:76:37:0d:64:32:61:54:
8b:35:48:8a:e5:d3:98:bc:ad:d3:e4:47:73:6f:b6:
75:65:7e:a1:6c:df:43:62:7d:42:5d:04:31:dc:77:
b6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6C:71:B6:3C:1F:D9:2A:88:01:7D:08:2E:75:98:49:9B:00:FB:E7
X509v3 Authority Key Identifier:
keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:13:6b:1b:85:06:0d:da:39:22:f3:55:46:ef:60:dc:2d:93:
8f:04:82:7e:79:a2:8e:ee:e2:a7:d1:45:cb:d7:25:28:a4:d2:
b3:a6:b7:90:81:80:fc:b6:a8:18:ca:1f:33:da:15:23:43:2e:
bb:2f:38:df:99:70:df:79:76:08:f2:9f:e2:f2:9d:ee:e8:ec:
6a:f4:33:65:2d:c8:43:52:49:26:54:ed:40:8c:de:99:dc:d3:
d4:33:9b:14:4c:3b:9c:33:ca:ec:6d:58:12:32:56:0d:89:1e:
6e:ff:ee:08:b5:85:76:97:94:9d:07:e2:89:10:4d:1b:db:83:
08:23:0e:20:37:7c:a4:78:a0:73:1c:58:c1:f9:5d:54:9e:1f:
24:d1:d3:af:48:b7:d3:4c:35:b8:5e:34:6d:a3:63:08:0a:68:
af:27:98:83:fe:35:28:c3:3f:c1:b3:cd:d9:46:eb:08:91:f4:
4d:d9:33:4f:f9:0d:7d:b5:ce:3b:7e:09:33:e8:7d:76:46:e8:
7c:b9:65:53:1d:b3:db:0f:43:99:a5:37:83:69:ab:69:6b:f0:
6d:60:2c:96:62:41:d2:42:17:62:77:8f:93:94:b0:2e:1b:e4:
24:4a:74:8b:b3:31:e8:4a:c0:25:ed:63:9e:9e:17:82:11:24:
af:3d:bf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:05:50 2025 by rpki-client